Lucene search
+L

1233 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/12 3:41 p.m.โ€ข306 views

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

5.6AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/12 8:56 a.m.โ€ข12 views

apache_skywalking

Apache SkyWalking SkyWalking : ๋งˆ์ดํฌ๋กœ์„œ๋น„์Šค, ํด๋ผ์šฐ๋“œ ๋„ค์ดํ‹ฐ๋ธŒ ๋ฐ ์ปจํ…Œ์ด๋„ˆ ๊ธฐ๋ฐ˜Docker, Kubernetes, Mesos ์•„ํ‚คํ…์ฒ˜๋ฅผ ์œ„ํ•ด ํŠน๋ณ„ํžˆ ์„ค๊ณ„๋œ APM์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ์„ฑ๋Šฅ ๋ชจ๋‹ˆํ„ฐ๋ง ์‹œ์Šคํ…œ์ž…๋‹ˆ๋‹ค. ๊ฐœ์š” SkyWalking ์€ ํด๋ผ์šฐ๋“œ ๋„ค์ดํ‹ฐ๋ธŒ ์•„ํ‚คํ…์ฒ˜์˜ ๋ถ„์‚ฐ ์‹œ์Šคํ…œ์„ ์œ„ํ•œ ๋ชจ๋‹ˆํ„ฐ๋ง, ํŠธ๋ ˆ์ด์‹ฑ, ์ง„๋‹จ ๊ธฐ๋Šฅ์„ ํฌํ•จํ•˜๋Š” ์˜คํ”ˆ ์†Œ์Šค APM ์‹œ์Šคํ…œ์ž…๋‹ˆ๋‹ค. ํ•ต์‹ฌ ๊ธฐ๋Šฅ์€ ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค. ์„œ๋น„์Šค, ์„œ๋น„์Šค ์ธ์Šคํ„ด์Šค, ์—”๋“œํฌ์ธํŠธ ๋ฉ”ํŠธ๋ฆญ ๋ถ„์„ ๊ทผ๋ณธ ์›์ธ ๋ถ„์„. ๋Ÿฐํƒ€์ž„์—์„œ ์ฝ”๋“œ๋ฅผ ํ”„๋กœํŒŒ์ผ๋งํ•ฉ๋‹ˆ๋‹ค. ์„œ๋น„์Šค ํ† ํด๋กœ์ง€ ...

5.9AI score
SaveExploits0References19
Kitploit
Kitploit
โ€ขadded 2026/09/12 6:05 a.m.โ€ข10 views

apm

APM ๋ชจ๋‘๋ฅผ ์œ„ํ•œ ๋” ๋‚˜์€ ๋กœ์ปฌ ๋น„๋ฐ€๋ฒˆํ˜ธ ๊ด€๋ฆฌ์ž. APM์€ Go์™€ Rust๋กœ ์ž‘์„ฑ๋œ ๋น ๋ฅด๊ณ  ์ œ๋กœ-์ง€์‹zero-knowledge CLI ๋น„๋ฐ€๋ฒˆํ˜ธ ๊ด€๋ฆฌ์ž์ž…๋‹ˆ๋‹ค. ๋‹จ์ผ ์•”ํ˜ธํ™” ๋ณผํŠธ์— 25๊ฐœ ์ด์ƒ์˜ ๊ตฌ์กฐํ™”๋œ ๋น„๋ฐ€ ์œ ํ˜•์„ ์ €์žฅํ•ฉ๋‹ˆ๋‹ค โ€” ๋น„๋ฐ€๋ฒˆํ˜ธ์™€ TOTP ์ฝ”๋“œ๋ถ€ํ„ฐ SSH ํ‚ค, ์˜๋ฃŒ ๊ธฐ๋ก, ์‚ฌ์ง„, ๋ฐ”์ด๋„ˆ๋ฆฌ ํŒŒ์ผ๊นŒ์ง€. ์ด ์ €์žฅ์†Œ์—์„œ๋Š” ๊ฐœ์ธ์šฉ pm๊ณผ ์กฐ์ง ๊ณต์œ  ๋ณผํŠธ์šฉ pm-team ๋‘ ๊ฐ€์ง€ ๋ฐ”์ด๋„ˆ๋ฆฌ๊ฐ€ ์ œ๊ณต๋ฉ๋‹ˆ๋‹ค. APM์„ ์„ ํƒํ•ด์•ผ ํ•˜๋Š” ์ด์œ  ๋น ๋ฅด๊ณ  ๋ฐฐ์šฐ๊ธฐ ์‰ฌ์›€ โ€” ๋ช…๋ น์–ด๋‚˜ ํ”Œ๋ž˜๊ทธ๋ฅผ ์™ธ์šธ ํ•„์š”๊ฐ€ ์—†์Šต๋‹ˆ๋‹ค. APM์ด ํ•„์š”ํ•œ ๊ฒƒ์„ ๋ฌผ์–ด๋ด…๋‹ˆ๋‹ค. ...

5.9AI score
SaveExploits0References14
Tenable Nessus
Tenable Nessus
โ€ขadded 2026/09/09 12:00 a.m.โ€ข8 views

Kibana 7.x / 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 Missing Authorization (ESA-2026-144)

The version of Kibana installed on the remote host is 7.14.0 through 7.17.29, or 8.x prior to 8.19.21, or 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-144 advisory. - Missing Authorization CWE-862 in Kibana can lead to...

6.5CVSS0.00225EPSS
SaveExploits0References2
NVD
NVD
โ€ขadded 2026/09/02 3:17 p.m.โ€ข6 views

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

4.9CVSS0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
โ€ขadded 2026/09/02 2:43 p.m.โ€ข33 views

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

4.9CVSS0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
โ€ขadded 2026/09/02 2:43 p.m.โ€ข15 views

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

4.9CVSS5.9AI score0.00285EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/09/02 2:43 p.m.โ€ข8 views

EUVD-2026-70058

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

4.9CVSS5.9AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
โ€ขadded 2026/09/02 2:43 p.m.โ€ข27 views

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

4.9CVSS5.9AI score0.00285EPSS
SaveExploits0References1Affected Software1
Elastic
Elastic
โ€ขadded 2026/09/01 10:33 p.m.โ€ข23 views

APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)

Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...

4.9CVSS5.8AI score0.00285EPSS
SaveExploits0
NVD
NVD
โ€ขadded 2026/09/01 8:17 p.m.โ€ข8 views

CVE-2026-78608

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

6.5CVSS0.00225EPSS
SaveExploits0References1
Circl
Circl
โ€ขadded 2026/09/01 8:02 p.m.โ€ข6 views

CVE-2018-18964

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:12+00:00| seen| https://t.me/hackingAttack/29057 2026-09-01 20:02:15+00:00| seen| https://t.me/hackingAttack/27123 2026-09-01 20:02:17+00:00| seen| https://t.me/hackingAttack/27117 2026-09-01 20:02:17+00:00| seen|...

4.9CVSS6.2AI score0.00997EPSS
SaveExploits0References4
EUVD
EUVD
โ€ขadded 2026/09/01 7:20 p.m.โ€ข9 views

EUVD-2026-69569

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

6.5CVSS5.9AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
โ€ขadded 2026/09/01 7:20 p.m.โ€ข15 views

CVE-2026-78608

CVE-2026-78608 is a Missing Authorization (CWE-862) vulnerability in Kibana , where an internal APM integration function lacked a proper authorization check. This allowed any authenticated Kibana user to read APM server credentials that should only be accessible to users with APM or Fleet adminis...

6.5CVSS5.9AI score0.00225EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
โ€ขadded 2026/09/01 7:20 p.m.โ€ข35 views

CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

6.5CVSS0.00225EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2026/09/01 7:20 p.m.โ€ข5 views

CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

6.5CVSS5.5AI score
SaveExploits0References3
Chainguard
Chainguard
โ€ขadded 2026/08/14 8:24 a.m.โ€ข23 views

GO-2025-4252 vulnerabilities

Vulnerabilities for packages: beats-fips, apm-server-fips, elastic-agent, apm-server, cloudbeat, cloudbeat-fips...

5.9AI score
SaveExploits0
Chainguard
Chainguard
โ€ขadded 2026/08/14 8:24 a.m.โ€ข29 views

GO-2023-2413 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, apm-server-fips, elastic-agent, apm-server, cloudbeat, cloudbeat-fips...

5.9AI score
SaveExploits0
Chainguard
Chainguard
โ€ขadded 2026/08/14 8:24 a.m.โ€ข30 views

GO-2026-4360 vulnerabilities

Vulnerabilities for packages: apm-server-fips, apm-server, cloudbeat, cloudbeat-fips, beats...

5.9AI score
SaveExploits0
Chainguard
Chainguard
โ€ขadded 2026/08/14 8:24 a.m.โ€ข19 views

GO-2025-4253 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, apm-server-fips, elastic-agent, apm-server, cloudbeat, cloudbeat-fips...

5.9AI score
SaveExploits0
Rows per page
Query Builder